feat(cli): align energy purchase, security, and agent output

[BlackChar92]

Scope

This is the single CLI PR for the coordinated open-source release. It combines energy direct purchase, security remediation, and AI readability in one review.

1. Energy direct purchase

• add energy purchase config, quote, order, history, risk, and buy
• use the app's trusted production endpoint by default: https://tegrow.ablesdxd.link
• enforce the mainnet-only production-host boundary on every command, including buy --dry-run and explicit production URL overrides
• normalize live config/quote fields and revalidate the payer, receivers, duration, payment address, and amount before signing
• expose public payer history for in-progress and settled orders
• return tokenless idempotent orders immediately instead of polling without credentials; retain recovery state until history confirms the payment/order

2. Security audit remediation

• serialize payer intents and payment-risk persistence across processes
• protect signer and recovery state with owner-only permissions and atomic replacement
• reject redirects for credential-bearing energy requests
• redact backend credentials and signed-payment material from normal output
• require explicit --yes for non-interactive writes and preserve fail-closed recovery state
• document that an ambiguous result may retain the exact signed request in the local mode-0600 risk file until reconciliation
• refresh dependency pins; production and development audits are clean

3. AI readability

• publish a versioned JSON success/error envelope with schemaVersion: "1.0.0"
• provide stable error codes, retryability, remediation hints, and stdout/stderr separation
• preserve native energy-purchase error codes and retry semantics at the process boundary
• ship schemas/output-v1.schema.json in the v1.0.1 package
• document command side effects, public history recovery, dry-run behavior, confirmation boundaries, and automation use

Validation

• npm run check — typecheck, 136 tests, and build passed
• energy regressions cover the Nile/production-host guard, public history pagination, redirect rejection, and tokenless idempotent recovery
• live read-only production smoke — config, current price, pool health, and a 65,000-energy quote passed
• Nile real E2E — order 98c3a0df-22ad-4090-bfd2-d09abfd23864 delivered; payment 89e9afd2…b2645 solidified; EnergyLimit +65,000; 0 unresolved risks
• npm audit --audit-level=high — 0 vulnerabilities
• npm pack --dry-run — v1.0.1 package includes the JSON schema

No mainnet payment was signed or broadcast during self-test.

Runtime boundary

The CLI signs the native TRX payment but never broadcasts it locally. The configured backend validates and may broadcast it. Economic limits, price, payment address, and pool capacity always come from live responses. Custom/test endpoints require explicit configuration and trust opt-in; the production endpoint is rejected with non-mainnet networks.

Coordinated rollout

Surface	PR	Candidate
CLI	justlend-cli#2	v1.0.1
MCP	mcp-server-justlend#30	v1.1.3
Skills	justlend-skills#8	v1.1.1
Docs	justlend-docs#102	coordinated docs

Docs may merge first. The CLI, MCP, and Skills PRs should follow in the same release window so public contracts do not remain ahead of implementation.